Skip to content

Commit cf7ae5d

Browse files
committed
Fix #35281: remove vulnerable bootstrap components
1 parent d6932c5 commit cf7ae5d

4 files changed

Lines changed: 5974 additions & 8 deletions

File tree

pom.xml

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,6 @@
3535
<monetdb-jdbc.version>12.0</monetdb-jdbc.version>
3636
<postgresql.version>42.7.5</postgresql.version>
3737
<fabric8-client.version>7.1.0</fabric8-client.version>
38-
<bootstrap.version>3.4.1</bootstrap.version>
3938
<jquery.version>3.7.1</jquery.version>
4039
<fontawesome.version>4.7.0</fontawesome.version>
4140
<jakarta-json-api.version>2.1.3</jakarta-json-api.version>
@@ -351,11 +350,6 @@
351350
<groupId>org.thymeleaf.extras</groupId>
352351
<artifactId>thymeleaf-extras-springsecurity6</artifactId>
353352
</dependency>
354-
<dependency>
355-
<groupId>org.webjars</groupId>
356-
<artifactId>bootstrap</artifactId>
357-
<version>${bootstrap.version}</version>
358-
</dependency>
359353
<dependency>
360354
<groupId>org.webjars</groupId>
361355
<artifactId>jquery</artifactId>

src/main/java/eu/openanalytics/containerproxy/api/BaseController.java

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -64,8 +64,8 @@ protected void prepareMap(ModelMap map) {
6464
HttpServletResponse httpServletResponse = servletRequestAttributes.getResponse();
6565
map.put("title", getTitle(userService.getCurrentAuth(), httpServletRequest.getServerName()));
6666
// no versioning (using instanceId) needed since paths already contain a version
67-
map.put("bootstrapCss", "/webjars/bootstrap/3.4.1/css/bootstrap.min.css");
68-
map.put("bootstrapJs", "/webjars/bootstrap/3.4.1/js/bootstrap.min.js");
67+
map.put("bootstrapCss", "/css/bootstrap.css");
68+
map.put("bootstrapJs", "/js/bootstrap.js");
6969
map.put("jqueryJs", "/webjars/jquery/3.7.1/jquery.min.js");
7070
map.put("fontAwesomeCss", "/webjars/fontawesome/4.7.0/css/font-awesome.min.css");
7171
map.put("resourcePrefix", "/" + identifierService.instanceId);

0 commit comments

Comments
 (0)